$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft File: pFVIOEAp8fN2pyJjKU0GWujJRCI.mft (raw, json) Hash identifier: WBn4/OeFcUnKDAazttQjvXPSFwvDX5WS03WpFCI26bk= Subject key identifier: 3E:7D:4E:3E:C6:CD:D1:0A:F0:46:14:6B:5C:C9:00:67:C4:13:92:23 Authority key identifier: A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22 Certificate issuer: /CN=A9137992/serialNumber=A45548384029F1F376A72263294D065AE8C94422 Certificate serial: 069B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft Manifest number: 0698 Signing time: Fri 24 Oct 2025 17:15:31 +0000 Manifest this update: Fri 24 Oct 2025 17:15:30 +0000 Manifest next update: Fri 31 Oct 2025 17:15:30 +0000 Files and hashes: 1: pFVIOEAp8fN2pyJjKU0GWujJRCI.crl (hash: jFxm+hnuX22SzCwdJ8gFmezBUk/rXpLSVV6voAFQFC4=) 2: 819B5C3274CB11EF941F0A71C4F9AE02.roa (hash: VjvaaM8L2XxhBSFFAzo+odtR38jKp4RPZEbo1pt7Hh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.crl rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 17:15:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1691 (0x69b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137992, serialNumber=A45548384029F1F376A72263294D065AE8C94422 Validity Not Before: Oct 24 17:15:30 2025 GMT Not After : Oct 31 17:15:30 2025 GMT Subject: CN=68fbb433-db8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:78:87:8f:6f:74:4d:e6:71:9f:a4:0e:f5: c9:7e:e1:b4:4f:a9:e8:2e:e0:0c:11:53:92:e7:40: fa:9d:e3:2e:e3:18:1c:a0:9d:e2:d5:47:57:fb:a0: fe:99:4c:2b:49:6e:94:0d:98:83:36:80:43:f3:e1: 08:25:86:cf:1d:ed:99:6e:02:a7:10:1e:4c:c0:5d: 35:5e:a9:b4:b2:30:a3:3e:d1:22:cf:6e:36:a7:2b: a3:3c:43:cd:24:33:bd:49:1b:8b:6c:dd:ec:1b:00: 07:6a:13:e0:12:d2:3a:d9:d2:8d:23:90:21:6a:36: 39:6c:0c:cc:a9:fd:9f:53:42:41:a2:60:54:be:a4: 2e:d5:12:4f:b4:b8:10:00:71:55:6c:cd:09:30:a1: 1f:4f:ef:ee:dc:72:71:f1:42:fa:fb:84:a8:24:34: 9e:e6:f4:01:05:14:6e:42:c9:e7:66:83:54:bb:cf: 51:a7:31:99:c6:aa:62:b2:4b:b5:3c:c4:40:cd:55: 80:a7:40:10:0d:c9:4a:06:00:a5:5b:45:26:2f:1f: d8:c2:9a:d7:c4:98:b9:73:5b:d7:ca:9d:23:74:7b: 3c:60:38:45:f3:ca:0c:99:5a:f5:83:69:71:d2:a0: 77:ab:5b:b3:3e:91:2d:66:26:59:2b:69:ab:b7:f5: 35:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7D:4E:3E:C6:CD:D1:0A:F0:46:14:6B:5C:C9:00:67:C4:13:92:23 X509v3 Authority Key Identifier: keyid:A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:ea:88:f3:71:04:db:eb:f0:03:60:74:da:97:6b:82:51:26: 03:c8:bd:e6:35:94:30:98:a3:b0:ab:9e:02:50:3c:88:cb:f2: 3e:3e:78:0c:b2:2c:f3:ff:8e:01:5a:2f:71:78:ea:41:6b:da: 58:00:b0:cc:74:60:0b:65:12:8f:44:00:82:95:f9:63:13:e8: cc:17:70:c1:ea:62:dd:05:b6:e6:5f:e4:15:a6:08:e0:5a:82: d6:97:a8:8f:01:2a:32:e3:18:bb:d4:81:db:02:8f:80:f0:ac: b8:06:75:04:dc:bd:3f:90:29:ac:f4:28:0a:7f:2e:6a:bd:0e: e1:f1:6b:24:7f:89:3e:f9:d6:ec:f3:65:26:3e:63:6f:6d:91: 44:cb:dc:8e:b2:fc:ae:2f:97:f3:45:97:bc:40:3f:aa:25:d6: 7f:c7:36:54:b5:6a:16:85:22:2f:60:49:02:94:46:7d:af:53: 84:e8:43:d7:43:71:f4:ba:f1:c6:a8:01:bc:73:36:70:e6:89: 91:4b:9b:e3:a2:98:16:a0:7e:5c:a7:f7:04:af:cb:ed:c5:c8: 89:1a:85:37:15:fc:93:70:80:a9:34:3e:5a:2d:e0:8f:1f:f0: 99:c3:9c:8c:c4:17:54:ef:09:0f:94:9e:33:bd:0f:4e:d6:d0: dc:28:2b:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5OTIxMTAvBgNVBAUTKEE0NTU0ODM4NDAyOUYxRjM3NkE3MjI2MzI5NEQwNjVB RThDOTQ0MjIwHhcNMjUxMDI0MTcxNTMwWhcNMjUxMDMxMTcxNTMwWjAYMRYwFAYD VQQDEw02OGZiYjQzMy1kYjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4V4h49vdE3mcZ+kDvXJfuG0T6noLuAMEVOS50D6neMu4xgcoJ3i1UdX+6D+ mUwrSW6UDZiDNoBD8+EIJYbPHe2ZbgKnEB5MwF01Xqm0sjCjPtEiz242pyujPEPN JDO9SRuLbN3sGwAHahPgEtI62dKNI5AhajY5bAzMqf2fU0JBomBUvqQu1RJPtLgQ AHFVbM0JMKEfT+/u3HJx8UL6+4SoJDSe5vQBBRRuQsnnZoNUu89RpzGZxqpisku1 PMRAzVWAp0AQDclKBgClW0UmLx/YwprXxJi5c1vXyp0jdHs8YDhF88oMmVr1g2lx 0qB3q1uzPpEtZiZZK2mrt/U1OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD59Tj7G zdEK8EYUa1zJAGfEE5IjMB8GA1UdIwQYMBaAFKRVSDhAKfHzdqciYylNBlroyUQi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzk5Mi8xOEE4MUVGMDhE MkUxMUVCOTg0MEUwNUZDNEY5QUUwMi9wRlZJT0VBcDhmTjJweUpqS1UwR1d1akpS Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BGVklPRUFwOGZOMnB5SmpLVTBHV3VqSlJDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzk5Mi8xOEE4MUVGMDhEMkUxMUVCOTg0MEUwNUZDNEY5QUUwMi9wRlZJT0VBcDhm TjJweUpqS1UwR1d1akpSQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx6ojzcQTb6/ADYHTal2uCUSYDyL3mNZQwmKOwq54CUDyIy/I+PngM sizz/44BWi9xeOpBa9pYALDMdGALZRKPRACClfljE+jMF3DB6mLdBbbmX+QVpgjg WoLWl6iPASoy4xi71IHbAo+A8Ky4BnUE3L0/kCms9CgKfy5qvQ7h8Wskf4k++dbs 82UmPmNvbZFEy9yOsvyuL5fzRZe8QD+qJdZ/xzZUtWoWhSIvYEkClEZ9r1OE6EPX Q3H0uvHGqAG8czZw5omRS5vjopgWoH5cp/cEr8vtxciJGoU3FfyTcICpND5aLeCP H/CZw5yMxBdU7wkPlJ4zvQ9O1tDcKCtT -----END CERTIFICATE-----Generated at Sat Oct 25 04:24:24 2025 by rpki-client